CVE-2017-9445: systemd Hit By New Security Vulnerability

[phoronix]

Phoronix: CVE-2017-9445: systemd Hit By New Security Vulnerability

CVE-2017-9445 is regarding a vulnerability opened by systemd that could allow malicious actors to crash the program or run programs via a specially crafted DNS response...

http://www.phoronix.com/scan.php?page=news_item&px=Systemd-OOB-Write-9445

[sdack]

Classic bait article. 10/10

[L_A_G]

Classic bait article. 10/10

Classic systemd fanboy response to a CVE concerning it. 1/10

[lano1106]

WTF? I though that systemd was a process launcher meant to replace initd!!!!

[uid313]

Maybe the resolver ought to be written in Rust instead.

[Sethox]

WTF? I though that systemd was a process launcher meant to replace initd!!!!

I am not trying to sound snarky or anything. But since the world of the digital moves along, you have to move along with it.
Just as you have to update your system, you have to update yourself (with information). That logic applies to anything (the latter).

[Ardje]

At least they thought it was worthy of opening a CVE.

[babali]

Maybe the resolver ought to be written in Rust instead.

Well rust will reduce the attack surface but not eliminate it.

[Darakus]

And this will be fixed in days(if not hours) by Red Hat. Unlike weeks for Microsoft or months for Apple when they get this type of bug.

[Pajn]

Well rust will reduce the attack surface but not eliminate it.

Rust would have eliminated this bug. And since these kind of bugs are by far the most common security bugs users should demand that more things get written in Rust.
I don't want my computer to crash or leak sensitive data just because some programmer can't bother to learn a new language or want to express their "art" in a specific way.